Wireless Access

last person joined: 13 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Cisco 7921 Phones Fail Initial Associations - Denied; Ageout Messages

This thread has been viewed 2 times
  • 1.  Cisco 7921 Phones Fail Initial Associations - Denied; Ageout Messages

    Posted Dec 13, 2012 03:45 PM

    When turning on a Cisco 7921 or rebooting one, the phone is not able to connect to the network and receives AP Ageout messages from a dozen or so APs.   After the ageout messages complete, the phone is able to join and function with no problems.   however on any subsequent reboot of the phone the same takes place.  If the phone is off for a long period (powered off) it seems to connect up fine.

     

    Just a few examples (each occurrence has anywhere from 5-10 different APs that do this)

     

    Dec 13 15:33:48  stm Assoc request @ 15:33:48.483814: 11:22:33:55:66 (SN 3956): AP 1.1.128.95-00:0b:86:7e:35:79-AP-F33
    Dec 13 15:33:48  stm Assoc success @ 15:33:48.485416: 11:22:33:55:66: AP 1.1.128.95-00:0b:86:7e:35:79-AP-F33
    Dec 13 15:33:48  stm Sending STA 11:22:33:55:66 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x84, wmm:1, rsn_cap:28
    Dec 13 15:33:48  mobileip Station 11:22:33:55:66, 0.0.0.0: Received association on ESSID: Voice Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-F33 Group APs BSSID 00:0b:86:7e:35:79, phy a, VLAN ZZZ
    Dec 13 15:33:48  mobileip Station 11:22:33:55:66, 0.0.0.0: Mobility trail, on switch 1.1.133.23, VLAN ZZZ, AP AP-F33, Voice/00:0b:86:7e:35:79/a
    Dec 13 15:33:48  authmgr MAC=11:22:33:55:66 Station UP: BSSID=00:0b:86:7e:35:79 ESSID=Voice VLAN=ZZZ AP-name=AP-F33
    Dec 13 15:33:51  stm Deauth to sta: 11:22:33:55:66: Ageout AP 1.1.128.95-00:0b:86:7e:35:79-AP-F33 wifi_deauth_sta
    Dec 13 15:33:51  stm Sending STA 11:22:33:55:66 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x84, wmm:1, rsn_cap:28
    Dec 13 15:33:51  mobileip Station 11:22:33:55:66, 0.0.0.0: Received disassociation on ESSID: Voice Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-F33 Group APs BSSID 00:0b:86:7e:35:79, phy a, VLAN ZZZ
    Dec 13 15:33:51  mobileip Station 11:22:33:55:66, 255.255.255.255: Mobility trail, on switch 1.1.133.23, VLAN ZZZ, AP AP-F33, Voice/00:0b:86:7e:35:79/a
    Dec 13 15:33:51  stm Deauth to sta: 11:22:33:55:66: Ageout AP 1.1.128.95-00:0b:86:7e:35:79-AP-F33 Denied; Ageout
    Dec 13 15:33:51  stm Station 11:22:33:55:66: Clearing state
    Dec 13 15:33:51  authmgr MAC=11:22:33:55:66 Station DN: BSSID=00:0b:86:7e:35:79 ESSID=Voice VLAN=ZZZ AP-name=AP-F33
    Dec 13 15:34:55  stm Assoc request @ 15:34:55.219193: 11:22:33:55:66 (SN 796): AP 1.1.128.84-00:0b:86:7e:3f:b1-AP-C37
    Dec 13 15:34:55  stm Assoc success @ 15:34:55.220756: 11:22:33:55:66: AP 1.1.128.84-00:0b:86:7e:3f:b1-AP-C37
    Dec 13 15:34:55  stm Sending STA 11:22:33:55:66 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x84, wmm:1, rsn_cap:28
    Dec 13 15:34:55  mobileip Station 11:22:33:55:66, 0.0.0.0: Received association on ESSID: Voice Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-C37 Group APs BSSID 00:0b:86:7e:3f:b1, phy g, VLAN ZZZ
    Dec 13 15:34:55  mobileip Station 11:22:33:55:66, 0.0.0.0: Mobility trail, on switch 1.1.133.23, VLAN ZZZ, AP AP-C37, Voice/00:0b:86:7e:3f:b1/g
    Dec 13 15:34:55  authmgr MAC=11:22:33:55:66 Station UP: BSSID=00:0b:86:7e:3f:b1 ESSID=Voice VLAN=ZZZ AP-name=AP-C37
    Dec 13 15:34:58  stm Deauth to sta: 11:22:33:55:66: Ageout AP 1.1.128.84-00:0b:86:7e:3f:b1-AP-C37 wifi_deauth_sta
    Dec 13 15:34:58  stm Sending STA 11:22:33:55:66 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x84, wmm:1, rsn_cap:28
    Dec 13 15:34:58  mobileip Station 11:22:33:55:66, 0.0.0.0: Received disassociation on ESSID: Voice Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-C37 Group APs BSSID 00:0b:86:7e:3f:b1, phy g, VLAN ZZZ
    Dec 13 15:34:58  mobileip Station 11:22:33:55:66, 255.255.255.255: Mobility trail, on switch 1.1.133.23, VLAN ZZZ, AP AP-C37, Voice/00:0b:86:7e:3f:b1/g
    Dec 13 15:34:58  stm Deauth to sta: 11:22:33:55:66: Ageout AP 1.1.128.84-00:0b:86:7e:3f:b1-AP-C37 Denied; Ageout
    Dec 13 15:34:58  stm Station 11:22:33:55:66: Clearing state

     

     

    So, what can i do about these ageout messages?  A re they unrelated?

     

    Thanks



  • 2.  RE: Cisco 7921 Phones Fail Initial Associations - Denied; Ageout Messages

    Posted Dec 13, 2012 06:05 PM

    Hello clembo

    Did you try the config on the VRD Optimizing Aruba WLANs for Roaming Devices

    There is a suggested configuration there for that specific IP Phone...

     

    There are templates in there if you have not tried them try it!



  • 3.  RE: Cisco 7921 Phones Fail Initial Associations - Denied; Ageout Messages

    Posted Dec 13, 2012 06:08 PM

    This worked for me in one client but in another client i still get an issue which the voice call is not witha good quality...

    The sad thing is that the one of that is an alcatel WC... jeez... and the TAC doesnt seems to know how to fix it... (in this case there is no interference or anythinglike that... if i put an AP 61 works fine... but new ap like ap 93 doesnt work.


    Anyways i hope the template works for you, like it did with one of my clients

     

    Cheers

    Carlos



  • 4.  RE: Cisco 7921 Phones Fail Initial Associations - Denied; Ageout Messages

    Posted Dec 13, 2012 06:35 PM

    Yes, we followed trecommendations in the VRD and from Cisco's document for the 7921 phone.    Let me clarify, there are no other issues with the phone network (been functional for a year), except this initial association issue has come to our attention.   It only seems to be when a phone is restarted.   Ones that have been turned off for a while are fine, and ones that are associated remain so......until they are restarted.   The only messages I see are the age out messages above.